Skip to content

Update several packages (clean up vulnerabilities), upgrade to Typescript 5.9 - #649

Closed
bcantoni wants to merge 4 commits into
mainfrom
bcantoni/2020609-update-packages
Closed

bcantoni wants to merge 4 commits into
mainfrom
bcantoni/2020609-update-packages

Conversation

@bcantoni

@bcantoni bcantoni commented Sep 17, 2026

Copy link
Copy Markdown
Contributor

With this merged, I'll also close the old dependabot PRs 524, 526, and 527.

The first push had build failures, so I also updated jest and typescript (to 5.9). The tslint still works, but as a future improvement, Claude suggested we should migrate to eslint because tslint is unmaintained since 2019.

With this merged, I'll also close the old dependabot PRs 524, 526, and 527
@bcantoni
bcantoni requested a review from a team as a code owner September 17, 2026 18:03
bcantoni and others added 2 commits September 17, 2026 11:26
Upgrade jest, ts-jest, and @types/jest to their 29.x lines and add
jest-environment-jsdom (split out of Jest core in v28+), since ts-jest 27
caps its typescript peer dependency below 5.0. Also remove a stray
untracked yarn.lock; npm is the authoritative package manager here.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Verified npm run build (lint + webpack/ts-loader compile of all
Samples-Typescript sources) and npm test both pass, on both the local
default Node and Node v20.19.0. tslint runs cleanly against the TS 5.9
AST despite being unmaintained since 2019.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
@bcantoni bcantoni changed the title Npm update for several packages, cleaning up a few vulnerabilities Update several packages (clean up vulnerabilities), upgrade to Typescript 5.9 Sep 17, 2026
@bcantoni
bcantoni requested a lite review from Copilot September 17, 2026 18:34

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Changes recommended

Replace or remove the ineffective allowScripts configuration.

Get a fresh assessment by requesting another Copilot review.

Pull request overview

Updates development dependencies for vulnerability cleanup, TypeScript 5.9, and newer Jest tooling.

Changes:

  • Upgrades TypeScript, Jest, ts-jest, and related typings.
  • Adds jest-environment-jsdom.
  • Adds install-script configuration metadata.
File summaries
File Summary
package.json Updates development tooling, but allowScripts is not recognized and does not configure script execution as intended.
Review details
  • Files reviewed: 1/2 changed files
  • Comments generated: 1
  • Review effort level: Lite

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Comment thread package.json Outdated
@bcantoni

Copy link
Copy Markdown
Contributor Author

Do it later.

@bcantoni bcantoni closed this Sep 17, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants